Request Firewall NullRoute
Workflow #0018
Response Workflow
This workflow submits a change request in ServiceNow with pre-defined ticket text and the observable provided as input to the workflow. Supported observable: ip
Change Log
Date | Notes |
---|---|
Apr 1, 2021 | - Initial release |
Sep 10, 2021 | - Updated to use the new system atomics |
Aug 31, 2022 | - Minor updates to naming and descriptions |
See the Important Notes page for more information about updating workflows
Requirements
- The following system atomics are used by this workflow:
- None
- The following atomic actions must be imported before you can import this workflow:
- ServiceNow - Create Change Request (CiscoSecurity_Atomics)
- The targets and account keys listed at the bottom of the page
- ServiceNow
Workflow Steps
- Make sure the observable type provided is supported
- Calculate the ticket start and end time (defaults to three days from now from 2-5 AM eastern time)
- Create the change request in ServiceNow
Configuration
- Update the input variables on the
ServiceNow - Create Change Request
activity with your change request contents - Update the activities in the
Calculate Dates
group if you want to adjust the timeframe the change ticket is requested for - If you want to change the name of this workflow in the pivot menu, change its display name
Targets
Target Group: Default TargetGroup
Target Name | Type | Details | Account Keys | Notes |
---|---|---|---|---|
ServiceNow | HTTP Endpoint | Protocol: HTTPS Host: <instance>.service-now.com Path: /api | ServiceNow_Credentials | Be sure to use your instance URL |
Account Keys
Account Key Name | Type | Details | Notes |
---|---|---|---|
ServiceNow_Credentials | HTTP Basic Authentication | Username: ServiceNow User ID Password: ServiceNow Password |